Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132362e302f32332d3233203d3e20323731373234.roa
File:                     3133382e3131372e3132362e302f32332d3233203d3e20323731373234.roa (raw, json)
Hash identifier:          zLBlurTfAfl99PBaSiD6blpYAQ7juFmtBHwea+PWK7E=
Subject key identifier:   6D:FC:43:8D:F8:81:04:B5:FE:A9:FD:18:1C:7C:81:49:6E:E5:75:1D
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       7BE4BDCB33F252E101DC4C0EE961221D6CD2C4A6
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132362e302f32332d3233203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     271724
IP address blocks:        138.117.126.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:bd:cb:33:f2:52:e1:01:dc:4c:0e:e9:61:22:1d:6c:d2:c4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=6DFC438DF88104B5FEA9FD181C7C81496EE5751D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:d7:7e:a2:c6:5d:23:27:94:a8:ca:5c:fd:
                    48:92:51:ae:28:10:9a:74:69:ab:cd:c7:c5:fe:11:
                    ac:6b:7b:36:62:23:de:48:32:bf:12:aa:24:c2:a6:
                    f9:f5:4f:a8:14:13:30:cc:4a:34:52:7d:4f:84:4d:
                    59:8d:35:93:dd:b9:99:91:c8:51:05:d2:27:b2:59:
                    fc:eb:70:e0:28:f8:34:64:d7:db:5e:9f:86:7b:db:
                    e3:e3:cf:48:8f:81:57:d4:9e:6d:2a:ab:74:b1:b9:
                    7f:cb:c9:2e:f9:5f:77:23:7d:b9:af:d3:f9:d5:eb:
                    ab:c0:a8:58:82:bd:62:1a:f8:85:f2:49:9a:f3:60:
                    d7:45:11:9a:ca:02:f1:46:d8:73:99:24:db:28:bd:
                    17:44:7a:8f:8c:f9:66:82:1e:e0:88:bf:14:8e:90:
                    5a:43:9a:56:76:dd:71:64:76:20:cb:05:52:92:60:
                    a9:28:85:da:8d:d1:83:e9:44:36:b4:68:81:5f:aa:
                    5f:7b:dd:f9:60:8f:79:6f:41:ad:a2:2f:e1:ff:62:
                    f7:ac:46:bb:62:1a:c7:eb:17:25:5f:78:13:b5:f2:
                    b9:9d:f4:b1:58:b8:00:e0:13:47:29:0a:33:c9:6b:
                    42:c0:86:48:6a:9e:ab:9c:71:cb:ad:e0:6c:7b:21:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:43:8D:F8:81:04:B5:FE:A9:FD:18:1C:7C:81:49:6E:E5:75:1D
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132362e302f32332d3233203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:b8:9e:90:5b:35:d6:28:46:89:94:5e:34:28:ae:98:f8:
         26:3c:c8:df:17:0b:4e:e3:e4:7d:05:68:3a:21:7f:24:be:98:
         74:da:52:63:10:1e:f8:e1:79:44:64:e9:12:36:9b:81:1e:f9:
         36:42:a4:56:58:2b:14:67:bb:fe:75:8c:ae:57:70:87:a2:6c:
         d5:91:dd:b7:78:50:50:d9:32:29:c1:c7:ff:4f:d2:68:74:92:
         cf:c7:6e:cb:9e:50:5d:c9:68:14:66:4d:de:84:f7:34:b3:2c:
         ca:51:33:ab:c0:4d:fe:3f:8a:a6:cd:5e:07:f8:ae:17:a5:1b:
         6d:03:48:76:4b:b4:27:18:f9:da:1f:11:36:2d:f3:1c:94:83:
         73:fc:ca:43:6d:f2:29:f1:d4:8b:39:4d:0b:ef:4e:f8:f4:ad:
         d4:a7:41:a6:d4:d0:d9:39:29:95:23:bc:bd:b1:ad:82:80:e5:
         25:81:07:44:14:dc:ea:13:d1:0d:f2:00:23:00:fb:08:c8:86:
         5f:5c:e3:47:be:8a:2e:59:f2:35:e4:86:1f:d3:c5:0a:ef:10:
         ba:ab:ed:2f:fc:48:51:79:e5:e9:f6:00:ef:e2:d4:bb:5f:40:
         7f:42:fb:05:80:d1:e0:ed:a6:6f:f6:df:cc:7f:de:66:33:66:
         2c:df:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:11 2025 by rpki-client